Your photos, your data.

Rawenger is operated by Exquillin Digital SRL, a company registered in Brussels, Belgium (enterprise number 0645.527.278), with its registered office at Rue des Bannières 14, box 2, 1150 Woluwe-Saint-Pierre, Belgium. We are the controller of the personal data described here, under the EU General Data Protection Regulation (GDPR).

For anything about your data, write to hello@rawenger.com.

Your browser reads the RAW file locally and sends us only what the comparison needs:

• The JPEG you want to verify, at full resolution, plus smaller copies we make for the result page.
• The camera's own preview image, which the camera stores inside the RAW file.
• Camera metadata from the RAW file: camera make and model, lens, exposure settings, capture time, the software that wrote it, and the copyright notice and artist name if the camera recorded them.
• The RAW file's name, size and a fingerprint (a SHA-256 hash). The fingerprint identifies the file without revealing its content.
• The camera metadata inside your JPEG, read on our server to compare with the RAW. We never read location data from it.
• Location (GPS) from the RAW file, only if you tick the box to share it.

The sensor check. If you choose it, your browser also uploads the RAW file so we can decode the sensor data. The RAW file is deleted as soon as the check finishes, whether it succeeds or fails, and any RAW file left by an interrupted check is deleted when our server restarts. We never keep RAW files.

During the sensor check we also read the RAW file's metadata on our server, to confirm the camera details your browser sent; where they differ, the RAW file's values are used and the difference is shown. The camera's serial number is part of that metadata: we only note whether the file has one and never store the number itself.

We also store the result of the analysis and a scrambled form (a hash) of the private key that lets only your browser issue a certificate for the photo. The key itself stays in your browser.

To keep the free service fair, each check also records a hashed form of your internet address, or your account if you are signed in. We use it only to limit how many checks can be made in a day.

Faces. If your photo shows people, we check that each face in your JPEG is the face the camera captured, so that a swapped face can't earn a certificate. To do this, our server turns each face in your JPEG, and the same spot of the camera's preview, into a numerical description of its features, and compares the two. These descriptions exist only in memory while the check runs and are then discarded: we never store or log them, never compare them with any other photo or person, and never use them to find out who someone is. The certificate only records whether the faces matched.

A certificate is a public, signed record. It contains the title and photographer name you enter, the camera metadata above, the fingerprints of your JPEG and RAW file, the analysis results, and your location only if you choose to show it. Its page also shows a reduced-size copy of your photo.

Issuing a certificate needs an account: the certificate is saved to it, so that you can make it private or delete it later. We also email you the certificate's link and code. About a day after your first certificate, Ferenc, who builds Rawenger, sends you a one-time personal thank-you and asks for your feedback; we don't send another like it.

Anyone with the certificate's link, code or QR code can see it, and that is the point: it lets others check your photo. Please don't put anything on a certificate that you don't want to be public. The record is digitally signed, so any change made to it after it is issued would show.

• Email address and password. We store the password only in a form that cannot be turned back into it (a scrypt hash).
• First name, last name and country.
• Date of birth and website, if you choose to give them. We use your date of birth only to send you an occasional birthday gift or offer, and to make sure accounts are for people aged 16 or over.
• The list of certificates saved to your account.

Your account details are private. They are not shown on certificates: the photographer name on a certificate is whatever you type when you issue it.

• A session cookie keeps you signed in for up to 30 days. It is strictly necessary for signing in, cannot be read by scripts on the page, and is not used for anything else. We store only a scrambled form of it.
• Local storage in your browser keeps the private key for each photo you upload, so that only you can issue its certificate.

We use no advertising or analytics cookies, and the site loads no fonts, scripts or trackers from other companies.

When you use our contact form or email us, we keep your name, email address, the subject and your message to answer you.

The form also stores a scrambled (hashed) form of your internet address for one purpose: limiting how many messages can be sent from one address, to keep spam out.

We keep your email address, when you signed up and when you confirmed. Your subscription starts only after you click the link in our confirmation email, so nobody can sign you up without you knowing. As with the contact form, we store a hashed form of your internet address to limit sign-ups from one connection.

Every newsletter has an unsubscribe link. When you unsubscribe, we keep only your address marked as unsubscribed, so that we never write to you again unless you sign up anew.

• Certificates: anyone with the link, code or QR code, unless you have made it private.
• Result pages (the page you see after an analysis, at a /v/ address): anyone you share that link with. It shows your JPEG, the camera's preview and the analysis. The link is long and random, so it can't be guessed, but treat it like a private link.
• Your account: only you.
• Our hosting provider, which runs our servers on our behalf: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; servers in Germany (EU).

We do not sell your data, and we do not share it with anyone else unless the law requires us to.

• To provide the service you ask for (contract): analysing your photo, issuing and showing certificates, running your account.
• With your consent: storing your location, uploading your RAW file for the sensor check, giving us your date of birth, and receiving our newsletter. You can choose not to, and still use the service.
• Our legitimate interests: keeping the service secure, preventing abuse, and keeping certificates verifiable for the people who rely on them.
• The face check also rests on our legitimate interest in certificates that can be trusted. It only compares two versions of the same photo with each other to answer one question, “is this the same face?”, and never identifies anyone, so no one is recognised or tracked.

• RAW files: never kept, deleted as soon as the sensor check finishes.
• Photos, metadata and results of a verification: until you ask us to delete them.
• Certificates: for as long as Rawenger runs, so that links, badges and QR codes keep working. You can make one private yourself at any time, from your account or the photo's result page; it then stops being shown, and you can make it public again later. You can also delete one for good, which removes its photo and analysis too.
• Your account: until you delete it in your account (or ask us to). Deleting it also deletes your certificates, their photos and analyses, and your newsletter sign-up. An account whose email address is not confirmed within 7 days is deleted. Sign-in sessions expire after 30 days.
• Newsletter: until you unsubscribe. Sign-ups that are never confirmed are deleted after 30 days.
• Messages to us: as long as needed to handle them, and no longer than two years after the last reply.

Passwords and session keys are stored only in scrambled (hashed) form, certificates are signed so any alteration would show, files that are not meant to be public are never served, and access to our servers is restricted.

Under the GDPR you can ask us to:

• show you the personal data we hold about you, and give you a copy;
• correct it, or delete it;
• limit what we do with it, or object to it;
• withdraw a consent you gave, at any time.

Write to hello@rawenger.com, or use our contact form, and we will answer within one month. If you are not satisfied, you can complain to the Belgian Data Protection Authority (dataprotectionauthority.be) or the authority in your own country.

Rawenger is not intended for children under 16, and we do not knowingly collect their data.

If we change how we handle your data, we will update this page and the date at the top.